Who has authority over community data? > 2. **Governance body** — How is the community represented in governance decisions? > 3. **Consent mechanism** — How are data collection activities approved? > 4. **Purpose limitation** — What restrictions apply to data use and sharing? > 5. **Equity audit** —